The problem happens, if the running daemon is a symlink to another command. E.g.: dir /usr/lib/systemd/systemd-udevd lrwxrwxrwx 1 root root 17 Nov 29 11:19 /usr/lib/systemd/systemd-udevd -> ../../bin/udevadm which is fine to find out libraries are still used, but is wrong when displaying the name of the daemon and finding out which service it got started by.